American Lending Center, a financial services firm based in Irvine, California, has reported a ransomware-related cybersecurity incident potentially exposing the personal information of 123,158 people.

According to a filing with the Maine Attorney General, the breach occurred between July 24 and July 30, 2025, and was discovered on July 27. The company’s investigation, completed on April 8, 2026, revealed that an unauthorized actor accessed its internal network, deployed ransomware, and accessed files containing personal data.

Affected information may include names, dates of birth, and Social Security numbers. American Lending Center is offering affected individuals identity theft protection through IDX, including credit monitoring and a $1,000,000 insurance reimbursement policy.